diff options
author | Pamela Dragosh <pdragosh@research.att.com> | 2020-08-21 10:53:44 -0400 |
---|---|---|
committer | Pamela Dragosh <pdragosh@research.att.com> | 2020-08-21 11:30:38 -0400 |
commit | cc6265ef38c277559d5bee6695f0353b15f87b37 (patch) | |
tree | 60de12923f77b40d6f6f501eb4027acc50186df1 /docs/xacml/example.guard.filter.yaml | |
parent | 20358938559866a5937ee7af68678aabdf3a3c39 (diff) |
Add guard filter documentation
Added guard filter to documentation and expanded doc on the other
filters.
Issue-ID: POLICY-2590
Change-Id: I5683b1f8d6a1999f411c9eab5b538b8f2fb82664
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
Diffstat (limited to 'docs/xacml/example.guard.filter.yaml')
-rw-r--r-- | docs/xacml/example.guard.filter.yaml | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/docs/xacml/example.guard.filter.yaml b/docs/xacml/example.guard.filter.yaml new file mode 100644 index 00000000..261ffbee --- /dev/null +++ b/docs/xacml/example.guard.filter.yaml @@ -0,0 +1,39 @@ +tosca_definitions_version: tosca_simple_yaml_1_1_0 +topology_template: + policies: + - filter.block.region.allow.one.vnf: + description: Block this region from Control Loop actions, but allow a specific vnf. + type: onap.policies.controlloop.guard.common.Filter + type_version: 1.0.0 + version: 1.0.0 + properties: + actor: SO + operation: VF Module Create + algorithm: whitelist-overrides + filters: + - field: cloud-region.cloud-region-id + filter: RegionOne + function: string-equal + blacklist: true + - field: generic-vnf.vnf-id + filter: e6130d03-56f1-4b0a-9a1d-e1b2ebc30e0e + function: string-equal + blacklist: false + - filter.allow.region.block.one.vnf: + description: allow this region to do Control Loop actions, but block a specific vnf. + type: onap.policies.controlloop.guard.common.Filter + type_version: 1.0.0 + version: 1.0.0 + properties: + actor: SO + operation: VF Module Create + algorithm: blacklist-overrides + filters: + - field: cloud-region.cloud-region-id + filter: RegionTwo + function: string-equal + blacklist: false + - field: generic-vnf.vnf-id + filter: f17face5-69cb-4c88-9e0b-7426db7edddd + function: string-equal + blacklist: true
\ No newline at end of file |